Splunk Enterprise Security

Saving and Retrieving SPL Searches on Demand without Scheduling

AL3Z
Builder

Hi,

I would like to learn how to save an SPL search and be able to retrieve it whenever necessary. I'm unsure about the process of saving an SPL search without setting a schedule for it to run, and I'm seeking guidance on how to achieve this.

 Thanks

0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

Save as a report - you don't need to include a schedule - you can find the reports under Settings -> Searches, reports and alerts. From there you can Run the report when you want to.

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust

Save as a report - you don't need to include a schedule - you can find the reports under Settings -> Searches, reports and alerts. From there you can Run the report when you want to.

Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...